...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
SIG30-C | High | Likely | Medium | P18 | L1 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| Supported, but no explicit checker | |||||||
| Compass/ROSE | Can detect violations of the rule for single-file programs | ||||||||
| LDRA tool suite |
| 88 D, 89 D | Partially implemented | ||||||
| Parasoft C/C++test |
| CERT_C-SIG30-a | Properly define signal handlers | ||||||
| Function called from signal-handler not asynchronous safe Function called from signal-handler not asynchronous safe (strict) | Call to interrupted function causes undefined program behavior | |||||||
| Splint |
|
Related Vulnerabilities
For an overview of software vulnerabilities resulting from improper signal handling, see Michal Zalewski's paper "Delivering Signals for Fun and Profit" [Zalewski 2001].
...